Privacy Policy luma99 – A Real Commitment to User Data Protection

1 About This Privacy Policy

This Privacy Policy explains how luma99 collects, uses, stores, and protects the personal information you provide when using our platform. It is written as clearly as possible because we believe you have the right to know exactly what happens with your data.

We know many people skip privacy policy documents because they are too long and full of legal jargon. At luma99, we work hard to avoid that. If any section is unclear, our support team is always available to explain via live chat.

2 Data We Collect

Luma99 collects several categories of data depending on how you interact with the platform:

Data You Provide Directly

• Registration information: full name, date of birth, email address, phone number, and the password you choose.
• Verification documents: a copy of your national ID or passport required for the KYC process.
• Financial information: bank account or digital wallet details you registered for deposit and withdrawal purposes.
• Communication content: messages you send to the support team via live chat or email.

Automatically Collected Data

• Technical data: IP address, device type, operating system, browser version, and screen resolution.
• Activity data: pages visited, session duration, games played, and interaction patterns on the platform.
• Cookie data: setting preferences, login status, and session identification.

3 How We Use Your Data

Collected data is used for specific and legitimate purposes. luma99 does not process data for purposes unrelated to platform operations:

• Creating and managing user accounts and verifying identity.
• Processing deposits, withdrawals, and other financial transactions securely.
• Providing effective and responsive customer support.
• Detecting and preventing fraud, money laundering, and platform abuse.
• Personalizing your gaming experience based on your preferences and activity history.
• Sending important account notifications, including changes to terms and security information.
• Meeting applicable legal and regulatory obligations.
• Analyzing and improving the overall quality of our platform's services.

4 Legal Basis for Data Processing

Every personal data processing activity at luma99 has a valid legal basis:

• Contract performance: processing necessary to deliver the services you requested, such as processing transactions and managing your account.
• Legal obligation: processing required by laws and regulations, such as KYC verification and suspicious transaction reporting.
• Legitimate interests: processing for legitimate business interests such as fraud prevention, system security, and service improvement.
• Consent: for optional marketing communications, we only send these if you have explicitly consented.

5 Sharing Data with Third Parties

Luma99 may share data with third parties in limited and controlled circumstances. We never sell or trade your personal data for commercial gain.

Partners with Limited Data Access

• Payment provider: financial information required to process deposit and withdrawal transactions.
• Verification service provider: identity data for KYC purposes and fraud prevention.
• Cloud infrastructure provider: data storage and processing under strict confidentiality agreements.
• Legal authorities: we are required to fulfill data requests from competent authorities in accordance with applicable law.

Every third-party partner granted access to data is bound by a confidentiality agreement and may only use the data for specified purposes.

6 Cookies & Tracking Technologies

Luma99 uses cookies and similar technologies to enhance your platform experience. Cookies are small text files stored on your device when you visit the site.

Types of Cookies We Use

• Essential cookies: required for basic platform functions such as maintaining login status and session security. These cookies cannot be disabled.
• Preference cookies: stores your preferences such as display language and favorite game selections.
• Analytics cookies: helps us understand how users interact with the platform so we can continually make improvements.

7 Data Security

Protecting your personal data is luma99's top priority. We implement multiple layers of security to prevent unauthorized access, data loss, or misuse:

• 256-bit SSL encryption for all data transmissions between your device and our servers.
• Passwords are stored using cryptographic hashing — even luma99's internal team cannot view your password.
• Intrusion detection system and 24-hour security monitoring.
• Access to sensitive data is granted only to employees who require it to perform their duties.
• Regular security audits conducted by our internal team and independent third parties.

That said, no security system is 100% foolproof. If you suspect any unauthorized activity on your account, contact the luma99 support team immediately.

8 Data Storage & Retention

Luma99 retains personal data for as long as necessary to fulfill the purposes described in this policy, or as required by applicable law.

• Active account data is retained for as long as the account remains active and for any period required following account closure.
• Financial transaction records are retained for a minimum of 5 years in accordance with financial reporting obligations.
• KYC documents are retained in accordance with applicable anti-money laundering regulations.
• Support team communication data is retained for 2 years for service improvement purposes.

9 International Data Transfers

In its operations, luma99 may transfer or store data on servers located outside Indonesia. In such cases, we ensure that data transfers are carried out with adequate safeguards, including the use of standard contractual clauses and data transfer impact assessments.

10 Minor Protection

Luma99 strictly prohibits the use of the platform by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor's data has been collected without valid parental consent, that data will be promptly deleted and the associated account will be deactivated.

11 How to Exercise Your Rights

To submit a request regarding your personal data, you can contact the luma99 support team via live chat available on the platform. Please include the following information in your request:

• Full name and email address registered on your luma99 account.
• The type of request you are submitting (access, correction, deletion, etc.).
• Specific details about the data you wish to manage (if applicable).

We will verify your identity before processing your request and will respond within a maximum of 30 business days. Some requests may take longer depending on their complexity.

12 Privacy Policy Updates

Luma99 may update this Privacy Policy from time to time to reflect changes in practices, technology, or legal requirements. Any material changes will be communicated via email or platform notification at least 14 days before taking effect.

We encourage you to review this page periodically. The "Effective Date" at the top of the page indicates when this policy was last updated.

13 Privacy Inquiry Contact

If you have any questions, concerns, or complaints about how luma99 handles your personal data, we strongly encourage you to contact us:

• Live Chat: available 24 hours via the chat button on the luma99 platform.
• Support Email: [email protected] (displayed as text, not a link).

We are committed to taking every privacy-related inquiry seriously and responding as promptly as possible. If you feel your concern has not been adequately addressed, you may also file a complaint with the relevant data protection authority.

See also the page Terms and Conditions and Responsible Gaming for additional information about our platform rules.